Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3bnjwxEVywK7wNTRN1uskBUArwaJpHptFGu6aEtrhmjk/1/3230312e34392e3134342e302f32312d3234203d3e203533313539.roa
File:                     3230312e34392e3134342e302f32312d3234203d3e203533313539.roa (raw, json)
Hash identifier:          98d9kG3IIbXXs1O8Cqhqq/Qt8NJ4SUS1Gf7v4DaQnCs=
Subject key identifier:   81:74:1F:83:80:F2:B6:BE:2A:A2:89:6C:EB:81:B1:E5:06:20:E3:54
Certificate issuer:       /CN=89F15BD396CAE94A713E7ACE40899EFCB3FEA71C
Certificate serial:       0BC9F3722022A8F52CD022880E684CA26E516FA4
Authority key identifier: 89:F1:5B:D3:96:CA:E9:4A:71:3E:7A:CE:40:89:9E:FC:B3:FE:A7:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89F15BD396CAE94A713E7ACE40899EFCB3FEA71C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3bnjwxEVywK7wNTRN1uskBUArwaJpHptFGu6aEtrhmjk/1/3230312e34392e3134342e302f32312d3234203d3e203533313539.roa
Signing time:             Thu 04 Apr 2024 03:32:02 +0000
ROA not before:           Thu 04 Apr 2024 03:27:02 +0000
ROA not after:            Thu 03 Apr 2025 03:32:02 +0000
asID:                     53159
IP address blocks:        201.49.144.0/21 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:c9:f3:72:20:22:a8:f5:2c:d0:22:88:0e:68:4c:a2:6e:51:6f:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89F15BD396CAE94A713E7ACE40899EFCB3FEA71C
        Validity
            Not Before: Apr  4 03:27:02 2024 GMT
            Not After : Apr  3 03:32:02 2025 GMT
        Subject: CN=81741F8380F2B6BE2AA2896CEB81B1E50620E354
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:9c:22:03:da:7f:40:14:af:5a:f1:ae:96:0f:
                    68:ff:97:08:53:f1:82:c8:2a:18:b4:34:ba:e6:a7:
                    6c:b6:a7:f1:1b:dd:2a:8b:3e:a8:cb:b0:48:3e:14:
                    9d:c7:69:99:d6:26:6d:50:a8:52:ac:e3:b3:39:11:
                    1a:da:6f:b2:6d:66:b2:89:f2:b7:78:78:77:a9:96:
                    bd:2e:93:ec:dd:ce:c9:33:3c:8c:a4:ca:a2:be:dd:
                    79:b2:83:ab:d7:f8:02:71:ae:cc:57:99:07:7a:66:
                    85:e6:d8:96:1c:d5:84:8b:e6:bd:ba:38:2a:07:94:
                    ef:2b:4b:b5:d4:fd:38:4f:1e:50:b0:ea:ea:50:1a:
                    c8:e2:18:14:7e:6e:fa:9e:9e:c8:6e:be:44:2e:ac:
                    66:fe:e5:ea:fd:31:70:21:95:9c:74:09:23:d9:5e:
                    90:05:58:81:79:cd:69:6b:47:5a:6b:1e:ab:ee:09:
                    66:05:26:eb:43:a1:bd:c2:86:73:b0:c8:30:fe:a5:
                    01:9c:ab:6c:1c:1f:6e:41:a9:29:d3:d8:8f:8e:d5:
                    1c:86:d6:2b:b7:42:c7:bc:1f:df:64:b4:09:90:8a:
                    22:4f:26:9e:3b:ca:66:27:55:fc:f6:56:ac:0b:23:
                    e5:b5:a7:26:92:e7:dc:3c:07:0a:bd:d9:cd:2b:48:
                    08:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:74:1F:83:80:F2:B6:BE:2A:A2:89:6C:EB:81:B1:E5:06:20:E3:54
            X509v3 Authority Key Identifier:
                keyid:89:F1:5B:D3:96:CA:E9:4A:71:3E:7A:CE:40:89:9E:FC:B3:FE:A7:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3bnjwxEVywK7wNTRN1uskBUArwaJpHptFGu6aEtrhmjk/1/89F15BD396CAE94A713E7ACE40899EFCB3FEA71C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89F15BD396CAE94A713E7ACE40899EFCB3FEA71C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3bnjwxEVywK7wNTRN1uskBUArwaJpHptFGu6aEtrhmjk/1/3230312e34392e3134342e302f32312d3234203d3e203533313539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5e:24:e2:1c:c3:2e:4b:ad:91:cc:aa:26:26:03:98:f9:55:62:
         54:5f:67:48:4e:62:d3:07:a5:af:6a:c4:cc:2e:e1:7e:2e:54:
         51:01:70:11:3f:02:bf:b2:f3:b2:96:0a:cd:f8:07:a2:9e:39:
         f2:4f:59:86:a5:dc:e8:09:8f:07:44:4b:fa:01:22:0c:60:25:
         65:1b:4d:c6:a9:e3:56:9e:0a:67:ab:a8:d8:fa:72:a1:e5:6d:
         76:87:e1:c5:0d:be:82:a7:d2:40:ee:5a:91:61:bb:e8:02:63:
         79:12:5e:12:4e:7c:ab:dc:33:03:cc:08:a8:14:6a:09:d9:40:
         6a:5a:ba:08:58:a8:19:c8:c8:a3:47:50:ac:53:b1:68:9f:1c:
         04:cc:4e:b8:72:95:c4:bc:14:d1:af:67:2c:eb:a9:d5:a1:52:
         a6:f8:8e:ed:4c:37:7e:1a:3f:ae:b2:70:4e:ff:8b:de:c6:e5:
         46:62:9e:66:22:66:5d:1f:07:68:a4:d9:f4:37:e9:8e:8d:65:
         23:6f:62:be:ae:3f:58:09:e2:64:26:59:f3:a5:06:bc:64:6b:
         7e:0d:04:6c:2e:ad:bf:54:92:0c:17:6b:ef:1c:38:cb:a2:dc:
         dc:6a:cc:fb:f5:f1:53:60:87:67:65:fd:22:d2:e2:53:78:a1:
         03:f4:65:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 8 03:52:16 2024 by rpki-client on console-ams.rpki-client.org